Am 23.11.15 um 10:33 schrieb Matthias Apitz:
What should I fix exactly if apache.org triggers this RDNS_NONE:

$ fgrep RDNS_NONE /tmp/apache.d
nov 23 08:30:06.666 [2204] dbg: rules: ran header rule __RDNS_NONE ======> got hit: 
"[ ip=140.211.11.3 rdns= "

you can find the full -D output of such a mail here:

http://www.unixarea.de/apache.d.txt

        
Just looked at your -D output. Your configuration is correct as 140.211.11.3 is correctly identified as Last External.

RDNS_NONE uses the pseudo header X-Spam-Relays-External and the pseudo headers are filled up with information from the Received headers, not from real DNS lookups. Take a look at the "dbg: received-header" and "dbg: metadata" lines in your debug output or at Received.pm.

nov 23 08:30:06.182 [2204] dbg: received-header: parsed as [ ip=140.211.11.3 
rdns= helo=mail.apache.org by=ms-10.1blu.de ident= 
envfrom=users-return-110371-guru=unixarea...@spamassassin.apache.org intl=0 
id=1a0c7H-0003WU-3m auth= msa=0 ]

...

nov 23 08:30:06.187 [2204] dbg: metadata: X-Spam-Relays-External: [ 
ip=140.211.11.3 rdns= helo=mail.apache.org by=ms-10.1blu.de ident= 
envfrom=users-return-110371-guru=unixarea...@spamassassin.apache.org intl=0 
id=1a0c7H-0003WU-3m auth= msa=0 ] ...

The received header added by your ISP misses the hostname, therefore RDNS_NONE hits on every mail:

Received: from [140.211.11.3] (helo=mail.apache.org)
        by ms-10.1blu.de with smtp (Exim 4.76)
        
(envelope-from<users-return-110371-guru=unixarea...@spamassassin.apache.org>)
        id 1a0c7H-0003WU-3m
        forg...@unixarea.de; Sun, 22 Nov 2015 22:24:11 +0100

To prove that, you can try -D again with edited received header, Exim should be:

Received: from hermes.apache.org ([140.211.11.3]) (helo=mail.apache.org)
        by ms-10.1blu.de with smtp (Exim 4.76)
        
(envelope-from<users-return-110371-guru=unixarea...@spamassassin.apache.org>)
        id 1a0c7H-0003WU-3m
        forg...@unixarea.de; Sun, 22 Nov 2015 22:24:11 +0100

RDNS_NONE shouldn't fire on that. Edda

Reply via email to